gh-aw v0.91.10 cuts network access for read-only agent workflows by default and records plugin installs and MCP config in session provenance. Follow-up releases through v0.91.14 (Oct 14) mask OTLP credentials in agent sandboxes and now require an explicit multi: true for multi-repo checkouts, so recompile your workflows.
AISLE’s October rollout adds an MCP server that exposes open repo findings to Claude Code and Cursor so agents can fix issues without leaving the editor; merges to main auto mark them resolved, and each developer signs in with their own AISLE login. The same drop also ships proof of exploitability for web/API flaws, runnable memory safety reproducers, and an AI package firewall for npm, PyPI, and Cargo…
Anthropic opened a public beta that exports OpenTelemetry traces from Claude Managed Agents, the Messages API, and Claude SDKs to any OTLP tool—covering agent turns, model calls, tool use, and MCP calls. Add a destination in the Claude Console (SDKs export automatically) so traces land in Grafana, Honeycomb, Sentry, LangSmith, and the rest of your stack…
Apigee hybrid 1.17.0 turns OpenAPI 3.0 specs into MCP tools via an MCP Discovery Proxy, with the data plane in your own cluster so tools/call traffic never leaves your infrastructure. Enable with enableMcpServer: true in overrides.yaml; API products gate which tools agents can list and call…
Kerno v1 lets your coding agent map and test full user flows, HTTP routes, MCP tools, and queue consumers against your real databases and services, with OWASP based security checks and tests saved to your repo. A deterministic kernoio/kerno check@v1 GitHub Action re runs them on every PR; the free Community plan covers one repo and 30 runs a month…
Chainguard opened GA for enterprise on four OAuth MCP servers— cg oci , cg apk , cg versions , and cg api —so agents in Claude Code, Cursor, and other MCP clients can verify image tags, Wolfi package equivalents, EOL status, and org policy before shipping deps. Connect via each server URL with browser OAuth, or headless with chainctl auth login audience=<server…
Spotted something we missed? Start a thread.
